{"id":"CVE-2022-31213","aliases":["ALSA-2022:6608","DEBIAN-CVE-2022-31213","EUVD-2022-52797","GHSA-xwvh-5vg2-56cj","OESA-2022-2116","RHSA-2022:6608","RLSA-2022:6608","UBUNTU-CVE-2022-31213","openSUSE-SU-2022:10030-1"],"status":"published","title":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found...","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02293,"percentile":0.8339,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-06-25T16:01:14Z","modified":"2026-11-03T08:01:29Z","fixes":[{"ecosystem":"Debian:12","package":"dbus-broker","fixed_in":["30-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dbus-broker","fixed_in":["30-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dbus-broker","fixed_in":["30-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28-5.1.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29-4.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:28-5.1.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-broker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:28-5.1.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dbus-broker-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:28-5.1.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:28-5.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["29-1","29-3","29-4","29-4build1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28-bp154.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dbus-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28-bp154.2.3.1"}]}],"bundled":2}],"products":[{"vendor":"dbus-broker_project","product":"dbus-broker"}],"references":[{"url":"https://github.com/bus1/dbus-broker/compare/v30...v31","tags":["x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/","tags":["x_transferred","Exploit","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202305-04","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31213","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xwvh-5vg2-56cj"},{"url":"https://access.redhat.com/errata/RHSA-2022:6608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31212","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31213","tags":["report"]},{"url":"https://bugzilla.redhat.com/2094718","tags":["report"]},{"url":"https://bugzilla.redhat.com/2094722","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6608.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31213.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-31213","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31212","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094722","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6608.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31212","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31213","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6608","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-31213","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YTBI3SDSIZY573CYLJALIS2TB3K6ZYEN/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200332","tags":["report"]},{"url":"https://bugzilla.suse.com/1200333","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31213","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-31213","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T00:00:00Z","modified":"2024-08-03T07:11:39.696Z","updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-52797","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T00:00:00Z","modified":"2024-08-03T07:11:39Z","updated_at":"2026-11-03T03:25:34.735493Z"}],"ghsa":[{"id":"GHSA-xwvh-5vg2-56cj","title":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found...","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-18T00:00:31Z","modified":"2023-05-03T12:30:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:34.500941Z"}],"nvd":[{"id":"CVE-2022-31213","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T23:15:09.02Z","modified":"2026-06-17T04:45:08.06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:23.686531Z"}],"osv":[{"id":"DEBIAN-CVE-2022-31213","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T23:15:09.02Z","modified":"2026-11-03T08:01:29.458162839Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-2116","title":"dbus-broker security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service\u0026apos;s Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.(CVE-2022-31212)\r\n\r\nAn issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.(CVE-2022-31213)","status":"published","published":"2022-11-25T11:05:26Z","modified":"2026-08-18T01:17:26.859643793Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:6608","title":"Red Hat Security Advisory: dbus-broker security update","status":"published","published":"2024-09-16T08:46:38Z","modified":"2026-06-27T10:15:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:6608","title":"Moderate: dbus-broker security update","description":"dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.\n\nSecurity Fix(es):\n\n* dbus-broker: a stack buffer over-read if a malicious Exec line is supplied (CVE-2022-31212)\n\n* dbus-broker: null pointer reference when supplying a malformed XML config file (CVE-2022-31213)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-20T11:40:32Z","modified":"2026-02-04T12:00:08.066153Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-31213","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T23:15:00Z","modified":"2025-09-08T16:50:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2022:6608","title":"Moderate: dbus-broker security update","description":"dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.\n\nSecurity Fix(es):\n\n* dbus-broker: a stack buffer over-read if a malicious Exec line is supplied (CVE-2022-31212)\n* dbus-broker: null pointer reference when supplying a malformed XML config file (CVE-2022-31213)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-20T00:00:00Z","modified":"2026-10-29T11:31:14.09021378Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-31213","description":"An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.","status":"published","published":"2022-07-17T00:00:00Z","modified":"2026-10-28T02:30:41.482475388Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"openSUSE-SU-2022:10030-1","title":"Security update for dbus-broker","description":"This update for dbus-broker fixes the following issues:\n\n- CVE-2022-31212: Fix a stack buffer over-read in bundled c-shquote (boo#1200332)\n- CVE-2022-31213: Fix a NULL pointer dereferences in bundled c-shquote (boo#1200333)\n","status":"published","published":"2022-06-25T16:01:14Z","modified":"2026-02-04T04:17:10.526616Z","updated_at":"2026-11-02T16:58:32.653274Z"}]}}